General

  • Target

    tmp

  • Size

    7KB

  • MD5

    1280c24d94f44b36f98ae63e476cf750

  • SHA1

    e31e288412465efdc99fb6a831ef6552140c5a1a

  • SHA256

    cfeed89f9e69339cf65ce4687737193cfcf5149719033cf6959ed7ad67531a27

  • SHA512

    6afd7bf068e8e577046a67af65826c221b0b1345df90aac6c40e7f60081a384b6773345b728e24f92130f6a80e227d3171bdc67162e71a339b9672a3d555408a

  • SSDEEP

    24:eFGStrJ9u0/6UoonZdkBQAVgWY/YKZqveNDMSCvOXpmB:is0s8kBQzwBSD9C2kB

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

103.29.68.92:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • tmp
    .exe windows x64

    b4c6fff030479aa3b12625be67bf4914


    Headers

    Imports

    Sections